Vulnerabilities > Qsan > Storage Manager > Medium

DATE CVE VULNERABILITY TITLE RISK
2021-07-07 CVE-2021-32507 Path Traversal vulnerability in Qsan Storage Manager
Absolute Path Traversal vulnerability in FileDownload in QSAN Storage Manager allows remote authenticated attackers download arbitrary files via the Url path parameter.
network
low complexity
qsan CWE-22
6.5
2021-07-07 CVE-2021-32509 Link Following vulnerability in Qsan Storage Manager
Absolute Path Traversal vulnerability in FileviewDoc in QSAN Storage Manager allows remote authenticated attackers access arbitrary files by injecting the Symbolic Link following the Url path parameter.
network
low complexity
qsan CWE-59
6.5